Fix: avoid user/password in config file (insight)